IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
630 Commits 11 Branches 63 Tags
7fe8e88e72773a207f6a23feb2d08feb34e77e6d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Rob Crittenden 7fe8e88e72 Switch 'below' to 'above' to point to the right location of the CA on the page 2008-02-07 11:32:30 -05:00
Rob Crittenden c50ebd9657 Don't set blank values so we don't end up with empty attributes 
Resolves 429895
 2008-01-30 09:31:03 -05:00
Rob Crittenden 97d9c235dd Set the license uniformly to GPLv2 only. 2008-02-04 15:15:52 -05:00
Rob Crittenden 217019e9de Create /var/run/<process>.pid to play nicers with the start scripts 
Need to start ipa_webgui as root and drop privs in order to write in /var/run
 2008-02-06 11:02:05 -05:00
Rob Crittenden ef5b4391de Fix broken attempt to return 0 on success, 1 on failure 2008-02-06 09:05:47 -05:00
Rob Crittenden 6935d94c14 Fix two typos 2008-02-05 16:50:12 -05:00
Rob Crittenden 07b1aef252 Return 1 on error, 0 on success 2008-02-05 13:55:06 -05:00
Rob Crittenden 5a96618f5d Use file to store the current CA serial number 
No longer create a PKCS#12 file that contains the CA
No longer send the entire CA to each replica, generate the SSL certs on master
Fix number of bugs in ipa-replica-install and prepare
Produce status output during replica creation
 2008-02-05 12:23:53 -05:00
Rob Crittenden 25057816a5 Remove = sign between [set|add|del]attr=attr=value to improve readability. 2008-02-04 13:52:04 -05:00
Rob Crittenden 96216539a7 Add --usage as a command-line option. 
Resolves 431283
 2008-02-01 22:22:34 -05:00
Rob Crittenden 0e3ecf6270 Marked with wrong license. IPA is GPLv2. 2008-01-31 16:49:01 -05:00
Rob Crittenden 15e2abaa25 Use orig_user_dict to get krbprincipalname when changing passwords. 
Add an extra exception handler so we don't return a 500 on errors.
 2008-01-31 17:38:21 -05:00
Rob Crittenden 1b988fff82 Ensure that the ipa_webgui error log exists and has correct permissions. 
Resolves 431089
 2008-01-31 14:21:07 -05:00
Rob Crittenden 5834ada3e9 Add option to list common attributes for use with --setattr,--addattr,--delattr 2008-01-31 11:24:52 -05:00
Rob Crittenden 64cce8f82e Handle the --usage option by actually displaying the usage 
Fix some missing options in --usage
Remove a few debugging statements
Resolves 430704
 2008-01-31 10:52:05 -05:00
Rob Crittenden ae5cb78ab8 Use proper string validation routine. 
Resolves 430709
 2008-01-31 10:59:38 -05:00
Rob Crittenden 00e3a81266 Use correct variable for domain when restoring a file. 
Resolves 430724
 2008-01-31 10:24:22 -05:00
Rob Crittenden 94a3a5c038 Fix discrepencies between built-in help and the man page. 
Resolves bz 429814
 2008-01-25 13:49:08 -05:00
Rob Crittenden 473eb9992e Enable logging so we can catch startup errors either in the console or 
the error log.
Add a foreground and debug flag
Resolves 430011
 2008-01-30 11:55:33 -05:00
Rob Crittenden d73dd8b427 Put user-modifiable files into /etc/ipa/html so they can be marked as 
config(noreplace).
Resolves 430004
 2008-01-30 09:58:15 -05:00
Rob Crittenden aad14c5d54 Missed closing quote 2008-01-29 11:33:44 -05:00
Rob Crittenden 71e39eccd8 Remove reference to radius that wasn't used and was causing program to fail. 
Resolves 429853
 2008-01-29 10:08:58 -05:00
Rob Crittenden 946ef21426 Include some additional information when installing IPA. 
Remove 8080 as a port that needs to be opened
bz 430088
 2008-01-25 17:08:36 -05:00
Rob Crittenden 5c58015fbe Fix misspelling of the word indices. 2008-01-25 13:29:49 -05:00
Rob Crittenden 9827ffedb7 Use consistent naming for tools. 
Resolves 430243
 2008-01-25 11:23:12 -05:00
Rob Crittenden f4ef672dd6 Listen only on the localhost interface 
Resolves bz 430191
 2008-01-25 10:17:37 -05:00
Rob Crittenden 34b56238d2 Dropped the last 's' in the sessions cache directory 2008-01-24 22:31:22 -05:00
Rob Crittenden 3d911a7beb Major mistake on my part by adding sessions to the wrong place. This broke 
ipa_webgui.
 2008-01-24 17:39:54 -05:00
Rob Crittenden 6bf366fc9a Missed one replacement of pyasn1 -> python-pyasn1 2008-01-24 14:54:41 -05:00
Rob Crittenden 3accc13db9 Include --prefix in all invocations of autogen.sh. 
Resolves bz 430002
 2008-01-24 14:40:54 -05:00
Rob Crittenden 00e20c2003 Use Fedora package names for PyKerberos (python-kerberos) and pyasn1 
(python-pyasn1) for the specfile Requires.
 2008-01-24 13:44:38 -05:00
Rob Crittenden 3594157f54 Add a copy of the LICENSE and populate some README's 2008-01-23 10:30:18 -05:00
Rob Crittenden 3302dc7446 Enable server-side sessions. It is currently using files for sessions. 2008-01-23 09:45:46 -05:00
Rob Crittenden 042fb11fa1 Fix issues reported by rpmlint. 
- Removing shebangs (#!) from a bunch of python libraries
- Don't use a variable name in init scripts for the lock file
- Keep the init script name consistent with the binary name, so renamed
  ipa-kpasswd.init to ipa_kpasswd.init
- Add status option to the init scripts
- Move most python scripts out of /usr/share/ipa and into the python
  site-packages directories (ipaserver and ipaclient)
- Remove unnecessary sys.path.append("/usr/share/ipa")
- Fix the license string in the spec files
- Rename ipa-webgui to ipa_webgui everywhere
- Fix a couple of issues reported by pychecker in ipa-python
 2008-01-18 16:20:36 -05:00
Rob Crittenden aaa3cfd58c Fix case where a question was being asked in unattended mode. 
Catch permission errors on install.
Initialize srv so the error message works if the user presses enter
 2008-01-17 16:36:05 -05:00
Rob Crittenden f45ded96a6 Add cyrus-sasl-gssapi as a requirement. 2008-01-16 10:26:53 -05:00
Rob Crittenden c7f3c746cc Backup system state in ipa-server-install 
This patch adds a sysrestore module which allows ipa-server-install
code to backup any system state so that it can be restored again
with e.g. ipa-server-install --uninstall.

The idea is that any files ipa-server-install modifies gets backed
up to /var/cache/ipa/sysrestore/ while any "meta" state, like
whether a service is enabled with chkconfig, is saved to
/var/cache/ipa/sysrestore.state.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
 2008-01-14 12:43:26 -05:00
Rob Crittenden 29c42e853a Find and delete service principals from the command-line. 2008-01-11 12:52:41 -05:00
Rob Crittenden 42d5ddc559 Service principal deletion 2008-01-11 11:44:23 -05:00
Rob Crittenden 58071a759a Remove registration of get_keytab 2008-01-03 09:29:58 -05:00
Rob Crittenden bbe1fdd8e9 Run ipa-webgui as apache and not as root 2008-01-11 13:05:44 -05:00
Rob Crittenden b51a147a6b Fix help text of -a argument 2008-01-11 13:01:39 -05:00
Rob Crittenden 74d2153c5e Clean up the formatting a little. 2008-01-04 16:44:33 -05:00
Rob Crittenden 1db719691e Add man page 2008-01-04 16:42:33 -05:00
Rob Crittenden 1c4e4b3e14 Add function to retrieve a short list of attributes to make ipa-adddelegation 
easier to use.
 2008-01-04 16:39:41 -05:00
Rob Crittenden dd28d4e6f6 Make button test consistent with rest of page 2008-01-07 16:02:40 -05:00
Rob Crittenden 0576193015 In add_service_principal() don't let the user pass in the realm. 
This could result in a principal of the form: service/host@something@REALM
 2008-01-07 14:03:13 -05:00
Rob Crittenden db2e5b26b7 Use a more obvious name for the subject of the IPA self-signed CA 2008-01-04 11:22:43 -05:00
Rob Crittenden baaead2709 Allow for direct entry of group names when creating delegations. 
This requires a bit of trickery. I use the onblur() javascript function
to note when the field is left and store whatever was entered there.

Then when the page is submitted if a dn doesn't exist for that field
but they did enter something, do a lookup to see if there is a group by
that name.
 2007-12-13 04:32:22 -05:00
Rob Crittenden b5af99c51d Fix the UI indicators for mandatory fields. 
The source and target groups weren't highlighted but the entire block of
checkboxes was and it looked absolutely horrible.
 2007-12-12 15:18:28 -05:00
Rob Crittenden f796e50000 Add simple UI for command-line programs to be able to select when 
multiple entries are returned.
 2007-12-10 16:12:58 -05:00
Rob Crittenden 2675f35fdf Tie the logging module to 'PythonOption IPADebug' in /etc/httpd/conf.d/ipa.conf 2007-12-11 09:56:37 -05:00
Rob Crittenden 40ff6f21db Prompt user before downloading a keytab that this will create a new secret, 
breaking any existing keytabs for that principal.
 2007-12-06 11:56:14 -05:00
Rob Crittenden 592329af18 Use more common names for first and last name labels 2007-12-10 11:55:52 -05:00
Rob Crittenden 6390db3502 Add automatic browser configuration for kerberos SSO using javascript. 
This uses the UniversalPreferencesWrite function to set the browser
preferences to allow negotiation and ticket forwarding in the IPA domain.
A self-signed certificate is generated to sign the javascript.
 2007-12-12 09:36:32 -05:00
Rob Crittenden ca8e71d938 Move the sort arrow to the left of the column title and don't overlap the text 2007-12-10 21:55:12 -05:00
Rob Crittenden f169641aae Use title case for field labels 2007-12-10 17:44:04 -05:00
Rob Crittenden 00489597d8 Rework input validation to more closely match what we require in the UI 2007-12-07 17:07:03 -05:00
Rob Crittenden 5e4a162954 Fix delegation in the UI and add a missing aci that allows writes. 
Make ipa-deldelegation more user-friendly.
 2007-12-07 16:08:12 -05:00
Rob Crittenden 0c0cc370cf Fix spelling 2007-12-10 15:01:30 -05:00
Rob Crittenden b75d735b7e Add default e-mail domain to the IPA configuration 2007-12-10 11:53:00 -05:00
Rob Crittenden c95550a164 Remove some debugging statements 2007-12-10 11:54:42 -05:00
Rob Crittenden 059e8f00ef Add principal management templates 2007-12-10 09:58:18 -05:00
Rob Crittenden 299e457698 Convert krbmaxpwdlife and krbminpwdlife from seconds into days and hours 2007-12-03 18:07:47 -05:00
Rob Crittenden 03fe2a8d6a Increase default max password lifetime from 10 to 90 days 2007-12-03 18:09:14 -05:00
Rob Crittenden 2e7f629d91 Remove unnecessary attribute left over from testing 2007-11-26 20:34:59 -05:00
Rob Crittenden 50c383aeed Update text to reflect new CSS code (sidebar now on right) 2007-11-06 10:22:47 -05:00
Rob Crittenden b3fa02225a Add back in some CSS that was removed in the big UI update. 
This adds back required field colors and colored error and warning msgs.
 2007-12-05 16:15:52 -05:00
rcritten@redhat.com c32a960cae Compatibility changes to work on RHEL 5 with python 2.4 2007-11-30 15:53:02 -05:00
Rob Crittenden 99c676702b The uid_hidden field needs to be retained until after validation succeeds 
otherwise if it ever fails, uid_hidden will be lost which can cause uid
to not be set which cascades into lots of other errors.
 2007-12-06 17:00:38 -05:00
Rob Crittenden 04cccd4426 Improve the error message when an entry is not found. 
We used to return the entire argument string ala:

('dc=freeipa,dc=org', 2, 'uid=foo', ['*'])

This adds a regex to try to print anything after = in the filter.
Not perfect but better.
 2007-12-06 16:48:26 -05:00
Rob Crittenden 2a2d866552 Make uid an editable field in the Edit UI so we can do RDN changes 
Fix group RDN changes
Remove a copy/paste error in the group UI update that caused 2 updates
Fix variable name so groups don't get user objectclasses
Remove color CSS for field backgrounds as they override disabled field display
 2007-12-06 15:36:42 -05:00
Rob Crittenden 6ea3d9610e Utilize user and group objectclass lists in cn=ipaconfig 
Change the syntax on user and group objectclasses in cn=ipaconfig
 2007-12-06 00:30:26 -05:00
Rob Crittenden 8ff9f63d80 Require that the default users group exists 
Fix some copy-paste errors from the password policy update
 2007-11-30 13:27:33 -05:00
Rob Crittenden bac556557d Don't allow the admins or editors groups to be removed. 
Don't allow the default group for users to be removed.
 2007-11-30 12:49:08 -05:00
Rob Crittenden 72595ab1a5 delete_group() takes a DN, not a CN. Also do slightly better error reporting. 2007-11-30 12:04:16 -05:00
Rob Crittenden 5025e990e9 Remove optional arguments from the XML-RPC interface 2007-11-29 16:48:32 -05:00
Rob Crittenden 74d0fba899 Change the password expiration message to be more precise. 2007-11-29 16:43:38 -05:00
Rob Crittenden ab67029d94 Add utility to lock user accounts. Remove lock capability from ipa-deluser 
Fix bootstrap.ldif to add new Class of Service entries properly
Include some man pages that weren't being installed
 2007-11-26 22:28:53 -05:00
Rob Crittenden 0b1650e7ad Add ipa-python to maintainer-clean and clean up .pyc files 2007-11-28 12:33:14 -05:00
Rob Crittenden 86d80f12ca Add some javascript so we can put focus on the first field of the page. 2007-12-06 17:49:56 -05:00
Rob Crittenden 7e2f44df45 Add 'Edit Policy' button at top of page. 2007-12-06 17:46:09 -05:00
Rob Crittenden 849803d37a Always show the edit link on your own record 2007-12-06 17:07:40 -05:00
Rob Crittenden eb141b02ff Move dn removal to the XML-RPC side and remove empty attributes 2007-12-05 17:26:39 -05:00
Rob Crittenden 62b8091a83 Notify the user when the search results have been truncated 2007-12-05 15:25:05 -05:00
Rob Crittenden 15b7dc6ff9 Add UI for service principal creation and keytab retrieval 2007-12-05 15:17:11 -05:00
Rob Crittenden 2fbe5cbf49 Phase 1 of allowing admins to set the default object classes for users & groups 
This adds the UI and does error checking of the selected object classes but
it doesn't actually use the values yet.

It also generalizes some functions for doing multi-valued fields.
 2007-12-04 13:18:37 -05:00
Rob Crittenden 69765f52ce Groups may be iterated over so should be an empty list, not None 2007-12-05 15:12:24 -05:00
Rob Crittenden 23ffab533f Make the old entry option in update_*, check for empty parameters and 
fix some problems reported by pychecker.
 2007-12-11 17:34:15 -05:00
Rob Crittenden 5c217ce31a Change from "Common Name" to "Full Name" 2007-12-11 15:14:29 -05:00
Rob Crittenden 10ac6c3c61 Enable searching for multiple things at once 2007-12-11 15:06:01 -05:00
Rob Crittenden 010fb65bfd define Self-Service as editting your own record. 
This has the side-effect of removing the realm from Loggin in as. This
can be changed by using user_name instead of display_name in master.kid.
 2007-11-02 17:41:24 -04:00
Rob Crittenden 9d24003528 Distinguish between active and inactive users on the Find People page. 2007-11-02 11:42:38 -04:00
Rob Crittenden c54826653f 'make all' needs to depend on autogen.sh but we don't want to re-run it 
on every iteration. This lets the top-level 'make install' work properly.
 2007-11-02 11:34:02 -04:00
Rob Crittenden dc01ea0fe6 groups come back as a list where the first element is the number of 
groups returned. Skip that element.
 2007-11-02 11:35:50 -04:00
Rob Crittenden 6a0ca23577 Update the UI look and feel 2007-11-01 16:15:32 -04:00
Rob Crittenden 10917161a7 Use proper method of retrieving attributes 2007-11-01 13:21:13 -04:00
Rob Crittenden a51dd58278 TurboGears log files and log rotation 
The error log is rotated weekly on Sunday. 4 backups are saved.

The access log is not stored since it would be a duplicate of the
Apache logs. It can be enabled if desired.

Had to move the call to daemonize() in ipa-webgui so that the
fork is done before TurboGears is initialized. Otherwise the log
files end up getting closed.
 2007-11-01 11:55:53 -04:00
Rob Crittenden d9f809746b Completely remove an attribute 2007-10-31 17:11:55 -04:00
Rob Crittenden d3d89f754b Use same tzinfo as the time parser to avoid TypeError from being thrown 2007-11-21 00:27:50 -05:00